Ariz. Rev. Stat. » Title 12
Arizona Revised Statutes

Ariz. Rev. Stat. § 12-2292 (2026)

Confidentiality of medical records and payment records

✓ text as last checked Oct. 2026 (this copy records no edition or section history)
Find cases: SyfertCases citing this section AZ-LEGazleg.gov (official) JustiaTitle on Justia CornellLII Search CasesGoogle Scholar

A. Unless otherwise provided by law, all medical records and payment records, and the information contained in medical records and payment records, are privileged and confidential.  A health care provider may only disclose that part or all of a patient's medical records and payment records as authorized by state or federal law or written authorization signed by the patient or the patient's health care decision maker.

B. This article does not limit the effect of any other federal or state law governing the confidentiality of medical records and payment records.

 

Notes of Decisions
Cited in 12 cases (6 in the last 5 years), 2007–2025 · leading case: Catrone v. Miles, 160 P.3d 1204 (Ariz. Ct. App. 2007).
Sort: Relevance Newest Treatment
Catrone v. Miles, 160 P.3d 1204 (Ariz. Ct. App. 2007). · cites it 5× “2006)? Second, are special education records protected by an educational records and/or special education records privilege? Third, if they are not protected by privilege, did the trial court abuse its discretion in compelling production of the academic records? We address each…”
Johnson v. O'Connor, 327 P.3d 218 (Ariz. Ct. App. 2014). · cites it 5× “¶ 23 PCS argues that Arizona’s medical records privacy statute, AR.S. § 12-2292, precludes the disclosure of medical records that may be subpoenaed under the Uniform Act.”
Schoeneweis v. Hamner, 221 P.3d 48 (Ariz. Ct. App. 2009). · cites it 8× “¶ 15 Petitioner argues that the medical examiner’s findings contained in the autopsy records and death certificate are not subject to disclosure under the Public Records Law because they are privileged and confidential pursuant to AR.S. § 12-2292 and are statu *174 torily exempt…”
Shepherd v. Costco, 441 P.3d 989 (Ariz. Ct. App. 2019). · cites it 2× “HIPAA, in relevant part, allows covered entities such as Costco to “disclose to .”
Carondelet Health Network v. Miller, 212 P.3d 952 (Ariz. Ct. App. 2009). · cites it 2× “are privileged and confidential. A health care provider may only disclose .”
Andrich v. Banner Univ., No. 1 CA-CV 22-0013 (Ariz. Ct. App. Nov. 8, 2022). · cites it 6× “¶17 We review the superior court’s order denying Andrich’s motion to strike for an abuse of discretion. See Birth Hope Adoption Agency, Inc. v.”
Greg Shepherd v. Costco Wholesale Corp., 482 P.3d 390 (Ariz. 2021). · cites it 2× “Airport Auth., 238 Ariz. 394 , 396 ¶ 9 (2015). ¶21 The parties and courts below differ on the source for and substance of a definition of good faith.”
Ward v. Thompson, 630 F. Supp. 3d 1140 (D. Ariz. 2022). · cites it 4× “” See A.R.S. § 12-2292. 27 Plaintiffs argue the subpoena improperly seeks telephone “metadata,” and that a 28 study from Stanford University shows that a patient’s “name or relationship status are 1 immediately apparent from telephone metadata” as well as “countless other…”
Johnson v. Yuma Reg'l Med. Ctr., No. 2:22-cv-01061 (D. Ariz. Aug. 13, 2025). · cites it 4× “5 Plaintiffs do not provide any explanation as to why the FTCA, HIPAA, and Arizona 6 Revised Statute § 12-2292 declare a public policy sufficient to create a tort duty.”
Ball v. Adhs, No. 1 CA-CV 21-0134 (Ariz. Ct. App. Dec. 28, 2021). · cites it 3× “Medical records include what the superior court referred to as “medical information,” as medical records are statutorily defined as “all communications related to a patient’s physical or mental health or condition that are recorded in any form or medium and that are maintained…”
Rose v. Dignity Health, No. 2:21-cv-00775 (D. Ariz. July 29, 2022). · cites it 2× “502 (a) and A.R.S. §12-2292. However, both 12 || parties already possess the records and both parties are already subject to the provisions of 13 || these regulations and statutes; thus, the Court does not see what “harm” will come if the || Court does not enter a protective…”
Carondelet Health Network v. Atteberry No Travmed USA, No. 2 CA-SA 2009-0019 (Ariz. Ct. App. June 12, 2009). · cites it 2× “the information contained in medical records . . . are privileged and confidential.”
Ariz. Rev. Stat. § 12-2292(A): 4 cases
Johnson v. O'Connor, 327 P.3d 218 (Ariz. Ct. App. 2014). “¶ 23 PCS argues that Arizona’s medical records privacy statute, AR.S. § 12-2292, precludes the disclosure of medical records that may be subpoenaed under the Uniform Act.”
Shepherd v. Costco, 441 P.3d 989 (Ariz. Ct. App. 2019). “HIPAA, in relevant part, allows covered entities such as Costco to “disclose to .”
Ball v. Adhs, No. 1 CA-CV 21-0134 (Ariz. Ct. App. Dec. 28, 2021). “Medical records include what the superior court referred to as “medical information,” as medical records are statutorily defined as “all communications related to a patient’s physical or mental health or condition that are recorded in any form or medium and that are maintained…”
Johnson v. Yuma Reg'l Med. Ctr., No. 2:22-cv-01061 (D. Ariz. Aug. 13, 2025). “5 Plaintiffs do not provide any explanation as to why the FTCA, HIPAA, and Arizona 6 Revised Statute § 12-2292 declare a public policy sufficient to create a tort duty.”
Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.